Systems and methods for dynamic temporary membership and data access

Abstract

In some examples, systems and methods for managing data access are provided. For example, a method includes: receiving a data access request for a user, the data access request including a resource indication of a data resource; providing the user a membership of an access group associated with the data resource; determining a member temporal parameter associated with the data resource based on one or more temporal parameters associated with the access group; and associating the member temporal parameter with the user.

What is claimed is: 
     
         1 . A method for managing data access, the method comprising:
 receiving a data access request for a user, the data access request including a resource indication of a data resource;   providing the user a membership of an access group associated with the data resource;   determining a member temporal parameter associated with the data resource based on one or more temporal parameters associated with the access group; and   associating the member temporal parameter with the user;   wherein the method is performed by one or more processors.   
     
     
         2 . The method of  claim 1 , wherein the one or more temporal parameters associated with the access group include at least one selected from a group consisting of an access duration, an access latest expiration, an access maximum duration, a membership duration, an access expiration, a membership expiration, and a membership maximum duration. 
     
     
         3 . The method of  claim 1 , wherein the one or more temporal parameters include a first temporal parameter and a second temporal parameter, wherein the first temporal parameter is different from the second temporal parameter, wherein the member temporal parameter is the first temporal parameter and the second temporal parameter. 
     
     
         4 . The method of  claim 1 , wherein the one or more temporal parameters include a first temporal parameter and a second temporal parameter;
 wherein the first temporal parameter is different from the second temporal parameter, wherein the first temporal parameter is set to a first time value and the second temporal parameter is set to a second time value;   wherein the determining a member temporal parameter includes:
 determining a specific time value based on the first time value and the second time value; and 
 set the specific time value to the member temporal parameter. 
   
     
     
         5 . The method of  claim 4 , wherein the specific time value is an earlier time value between the first time value and the second time value. 
     
     
         6 . The method of  claim 1 , wherein the determining a member temporal parameter includes:
 traversing a group hierarchy associated with the access group, the group hierarchy including a plurality of groups, the plurality of groups including the access group;   determining one or more temporal parameters associated with the plurality of groups; and   determining the member temporal parameter based at least in part on the one or more temporal parameters associated with the plurality of groups.   
     
     
         7 . The method of  claim 1 , wherein the data resource is a first data resource and the member temporal parameter is a first member temporal parameter;
 wherein the method further comprises:
 determining a second member temporal parameter associated with a second data resource different from the first data resource; 
   wherein the second member temporal parameter is different than the first member temporal parameter in a parameter type and/or a parameter value.   
     
     
         8 . The method of  claim 1 , wherein the member temporal parameter is associated with a first predetermined access;
 wherein the member temporal parameter has a first time value associated with the first predetermined access of the user;   wherein the method further comprises:
 determining a second time value associated with a second predetermined access of the user for the member temporal parameter, the second predetermined access being different from the first predetermined access, the second time value being different from the first time value. 
   
     
     
         9 . The method of  claim 1 , further comprising:
 auditing a plurality of data accesses associated with a plurality of members in the access group; and   determining a compliance to the plurality of data accesses for the plurality of members in the access group.   
     
     
         10 . The method of  claim 1 , wherein the data access request includes a time-based value;
 wherein the determining a member temporal parameter for the user includes determining the member temporal parameter based at least in part on the time-based value.   
     
     
         11 . The method of  claim 1 , wherein the access group is a first access group and the member temporal parameter is a first member temporal parameter, wherein the method further comprises:
 determining a second member temporal parameter for the user associated with a second access group different from the first access group;   wherein the second member temporal parameter is different than the first member temporal parameter in a parameter type and/or a parameter value.   
     
     
         12 . The method of  claim 1 , wherein the determining a member temporal parameter includes:
 determining the member temporal parameter using a machine-learning model based at least in part on at least one selected from a group consisting of the access group, the data resource, one or more temporal parameters associated with the access group, and the data access request.   
     
     
         13 . The method of  claim 12 , wherein the machine-learning model includes a large language model. 
     
     
         14 . The method of  claim 1 , further comprising:
 generating an access explanation using a machine-learning model based at least in part on at least one selected from a group consisting of the access group, the data resource, the data access request, and the member temporal parameter.   
     
     
         15 . The method of  claim 14 , wherein the machine-learning model includes a large language model. 
     
     
         16 . The method of  claim 1 , further comprising:
 based on the member temporal parameter, automatically removing the user from the access group.   
     
     
         17 . A system for managing data access, the system comprising:
 one or more memories comprising instructions stored thereon; and   one or more processors configured to execute the instructions and perform operations comprising:
 receiving a data access request for a user, the data access request including a resource indication of a data resource; 
 providing the user a membership of an access group associated with the data resource; 
 determining a member temporal parameter associated with the data resource based on one or more temporal parameters associated with the access group; and 
 associating the member temporal parameter with the user. 
   
     
     
         18 . The system of  claim 17 , wherein the one or more temporal parameters associated with the access group include at least one selected from a group consisting of an access duration, an access expiration, an access maximum duration, a membership expiration, a membership duration, and a membership maximum duration. 
     
     
         19 . The system of  claim 17 , wherein the one or more temporal parameters include a first temporal parameter and a second temporal parameter;
 wherein the first temporal parameter is different from the second temporal parameter, wherein the first temporal parameter is set to a first time value and the second temporal parameter is set to a second time value;   wherein the determining a member temporal parameter includes:
 determining a specific time value based on the first time value and the second time value; and 
 set the specific time value to the member temporal parameter. 
   
     
     
         20 . A non-transitory computer-readable storage medium having instructions for managing data access that, when executed by one or more processors, cause the one or more processors to perform operations comprising:
 receiving a data access request for a user, the data access request including a resource indication of a data resource;   providing the user a membership of an access group associated with the data resource;   determining a member temporal parameter associated with the data resource based on one or more temporal parameters associated with the access group; and   associating the member temporal parameter with the user.